CVE-2019-6535

Published: Feb 5, 2019Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 20101 and prior. A remote attacker can send specific bytes over Port 5007 that will result in an Ethernet stack crash and disruption to USB communication.

Affected (18)

Products: Mitsubishielectric: Q03udvcpu Firmware, Q04udvcpu Firmware, Q06udvcpu Firmware, Q13udvcpu Firmware, Q26udvcpu Firmware, Q04udpvcpu Firmware, Q06udpvcpu Firmware, Q13udpvcpu Firmware, Q26udpvcpu Firmware, Q03udecpu Firmware, Q04udehcpu Firmware, Q06udehcpu Firmware, Q10udehcpu Firmware, Q13udehcpu Firmware, Q20udehcpu Firmware, Q26udehcpu Firmware, Q50udehcpu Firmware, Q100udehcpu Firmware

18 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q03udvcpu Firmware	Up to 20081

Running on/with	Platform Versions
Mitsubishielectric Q03udvcpu	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q04udvcpu Firmware	Up to 20081

Running on/with	Platform Versions
Mitsubishielectric Q04udvcpu	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q06udvcpu Firmware	Up to 20081

Running on/with	Platform Versions
Mitsubishielectric Q06udvcpu	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q13udvcpu Firmware	Up to 20081

Running on/with	Platform Versions
Mitsubishielectric Q13udvcpu	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q26udvcpu Firmware	Up to 20081

Running on/with	Platform Versions
Mitsubishielectric Q26udvcpu	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q04udpvcpu Firmware	Up to 20081

Running on/with	Platform Versions
Mitsubishielectric Q04udpvcpu	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q06udpvcpu Firmware	Up to 20081

Running on/with	Platform Versions
Mitsubishielectric Q06udpvcpu	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q13udpvcpu Firmware	Up to 20081

Running on/with	Platform Versions
Mitsubishielectric Q13udpvcpu	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q26udpvcpu Firmware	Up to 20081

Running on/with	Platform Versions
Mitsubishielectric Q26udpvcpu	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q03udecpu Firmware	Up to 20101

Running on/with	Platform Versions
Mitsubishielectric Q03udecpu	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q04udehcpu Firmware	Up to 20101

Running on/with	Platform Versions
Mitsubishielectric Q04udehcpu	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q06udehcpu Firmware	Up to 20101

Running on/with	Platform Versions
Mitsubishielectric Q06udehcpu	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q10udehcpu Firmware	Up to 20101

Running on/with	Platform Versions
Mitsubishielectric Q10udehcpu	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q13udehcpu Firmware	Up to 20101

Running on/with	Platform Versions
Mitsubishielectric Q13udehcpu	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q20udehcpu Firmware	Up to 20101

Running on/with	Platform Versions
Mitsubishielectric Q20udehcpu	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q26udehcpu Firmware	Up to 20101

Running on/with	Platform Versions
Mitsubishielectric Q26udehcpu	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q50udehcpu Firmware	Up to 20101

Running on/with	Platform Versions
Mitsubishielectric Q50udehcpu	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mitsubishielectric Q100udehcpu Firmware	Up to 20101

Running on/with	Platform Versions
Mitsubishielectric Q100udehcpu	All versions

Related CWEs

CWE-400

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (4)

http://www.securityfocus.com/bid/106771

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryVDB Entry

https://www.cisa.gov/news-events/ics-advisories/icsa-19-029-02

Source: ics-cert@hq.dhs.gov

http://www.securityfocus.com/bid/106771

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://ics-cert.us-cert.gov/advisories/ICSA-19-029-02

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.